Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.mft
File:                     1K5pV43Ol3ozqindV8oZD6aHd_o.mft (raw, json)
Hash identifier:          AiabnjSWD56RRY30BtsPmy7gN7GnH9JMZs5qF+XNLwQ=
Subject key identifier:   88:F1:46:84:C5:82:13:A1:6E:5D:55:14:21:56:BD:83:98:BA:4D:D8
Authority key identifier: D4:AE:69:57:8D:CE:97:7A:33:AA:29:DD:57:CA:19:0F:A6:87:77:FA
Certificate issuer:       /CN=d4ae69578dce977a33aa29dd57ca190fa68777fa
Certificate serial:       019F8F11294654F6A999EBD05EBDA0A669F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1K5pV43Ol3ozqindV8oZD6aHd_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.mft
Manifest number:          103B
Signing time:             Thu 23 Jul 2026 13:01:34 +0000
Manifest this update:     Thu 23 Jul 2026 13:01:34 +0000
Manifest next update:     Fri 24 Jul 2026 13:01:34 +0000
Files and hashes:         1: 1K5pV43Ol3ozqindV8oZD6aHd_o.crl (hash: pa3rDWKrmAfFaI5aejxHpCLb+df9yP7h2b9sOF3cNBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1K5pV43Ol3ozqindV8oZD6aHd_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:11:29:46:54:f6:a9:99:eb:d0:5e:bd:a0:a6:69:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4ae69578dce977a33aa29dd57ca190fa68777fa
        Validity
            Not Before: Jul 23 13:01:34 2026 GMT
            Not After : Jul 24 13:01:34 2026 GMT
        Subject: CN=88f14684c58213a16e5d55142156bd8398ba4dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3c:fe:ff:52:e4:c1:3b:9e:61:cd:66:6f:16:
                    1b:d4:cc:92:af:19:43:b9:e0:d7:0e:9a:0e:20:ec:
                    f8:d1:a0:95:41:8c:cd:85:e6:ad:63:f7:bb:cc:0a:
                    e9:f8:05:98:13:12:b4:16:15:04:49:68:56:9a:15:
                    24:dc:20:f3:44:2e:a6:20:4b:3b:a8:0f:ff:1e:14:
                    29:59:52:68:19:ed:20:3e:73:b1:9e:37:7c:df:4c:
                    25:05:c1:37:dc:47:3d:da:6e:22:9f:4f:2f:eb:91:
                    36:bb:f5:be:27:b6:a9:ef:98:13:da:d6:a5:12:66:
                    c4:b3:16:ae:f4:96:bc:c2:9f:67:1b:c0:b5:7f:95:
                    48:70:43:e3:01:01:b9:6b:fc:2c:40:a8:3e:dd:70:
                    f8:66:cd:b4:bc:c3:5d:fc:37:49:e1:10:39:4f:83:
                    5d:d1:8f:1f:74:c0:7a:7e:07:8f:24:4b:7b:36:93:
                    79:89:76:bd:a4:f3:d6:f1:7a:bf:bb:7c:63:1f:8d:
                    1a:2e:1c:3b:80:2a:8e:23:ab:db:6b:43:aa:98:75:
                    95:50:4e:4d:37:58:ee:d7:2a:b0:fe:23:e0:53:ed:
                    95:f7:37:55:d8:eb:1b:75:ba:51:7f:ae:8d:05:bb:
                    5d:9e:6c:19:31:bb:46:ff:a1:76:d3:21:b7:4a:4f:
                    0d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F1:46:84:C5:82:13:A1:6E:5D:55:14:21:56:BD:83:98:BA:4D:D8
            X509v3 Authority Key Identifier:
                keyid:D4:AE:69:57:8D:CE:97:7A:33:AA:29:DD:57:CA:19:0F:A6:87:77:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K5pV43Ol3ozqindV8oZD6aHd_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:73:90:03:3d:b3:a4:72:f9:48:26:b5:4b:fa:b1:ea:a1:03:
         bd:cb:03:6e:00:3c:bd:3d:84:63:8d:c5:db:bc:e7:86:fa:69:
         e4:e7:f7:61:ce:7a:0e:c3:2d:e9:df:37:d6:35:21:5d:b9:89:
         d1:32:d5:0f:71:90:74:93:4b:e2:41:13:54:7d:84:df:15:88:
         69:0a:05:02:38:53:3d:62:a2:9f:7c:60:f6:04:e6:1d:fb:b0:
         e4:d7:e3:e7:c3:fa:b0:27:0f:50:7c:e3:36:c6:6d:f9:a6:ff:
         28:8f:cf:5c:d2:c7:0e:b0:6b:89:9c:5a:51:4b:e7:cd:94:8c:
         c5:6f:c1:a2:90:46:93:c3:0f:50:f8:31:ed:01:ac:62:86:93:
         0c:6b:58:63:a0:69:95:c3:48:b3:c5:16:32:8a:1b:0b:07:5e:
         88:4a:ad:95:3c:0d:af:1b:5e:35:79:94:6e:17:3a:68:56:d1:
         0c:51:c9:1b:47:5d:df:28:b0:6d:46:cb:4a:41:b8:9e:57:88:
         f9:70:58:61:e8:22:ec:ba:7e:e4:44:c4:bd:9d:b5:f9:c8:e6:
         af:31:d6:1d:a2:4c:cd:3f:89:c5:82:79:55:33:f7:f6:d8:88:
         c8:47:0e:8a:3d:f6:e3:b7:e5:b0:b4:a8:bb:70:e7:35:38:e3:
         7b:d4:94:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PESlGVPapmevQXr2gpmn3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YWU2OTU3OGRjZTk3N2EzM2FhMjlkZDU3Y2ExOTBmYTY4
Nzc3ZmEwHhcNMjYwNzIzMTMwMTM0WhcNMjYwNzI0MTMwMTM0WjAzMTEwLwYDVQQD
Eyg4OGYxNDY4NGM1ODIxM2ExNmU1ZDU1MTQyMTU2YmQ4Mzk4YmE0ZGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Tz+/1LkwTueYc1mbxYb1MySrxlD
ueDXDpoOIOz40aCVQYzNheatY/e7zArp+AWYExK0FhUESWhWmhUk3CDzRC6mIEs7
qA//HhQpWVJoGe0gPnOxnjd830wlBcE33Ec92m4in08v65E2u/W+J7ap75gT2tal
EmbEsxau9Ja8wp9nG8C1f5VIcEPjAQG5a/wsQKg+3XD4Zs20vMNd/DdJ4RA5T4Nd
0Y8fdMB6fgePJEt7NpN5iXa9pPPW8Xq/u3xjH40aLhw7gCqOI6vba0OqmHWVUE5N
N1ju1yqw/iPgU+2V9zdV2OsbdbpRf66NBbtdnmwZMbtG/6F20yG3Sk8NTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjxRoTFghOhbl1VFCFWvYOYuk3YMB8GA1UdIwQY
MBaAFNSuaVeNzpd6M6op3VfKGQ+mh3f6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUs1cFY0M09sM296cWluZFY4b1pENmFIZF9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iZDg5MDAtZWM5NS00NzViLTg5Yjct
YjRmMjk3N2QxOTZiLzEvMUs1cFY0M09sM296cWluZFY4b1pENmFIZF9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9iZDg5MDAtZWM5NS00NzViLTg5YjctYjRmMjk3N2QxOTZi
LzEvMUs1cFY0M09sM296cWluZFY4b1pENmFIZF9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt3OQAz2z
pHL5SCa1S/qx6qEDvcsDbgA8vT2EY43F27znhvpp5Of3Yc56DsMt6d831jUhXbmJ
0TLVD3GQdJNL4kETVH2E3xWIaQoFAjhTPWKin3xg9gTmHfuw5Nfj58P6sCcPUHzj
NsZt+ab/KI/PXNLHDrBriZxaUUvnzZSMxW/BopBGk8MPUPgx7QGsYoaTDGtYY6Bp
lcNIs8UWMoobCwdeiEqtlTwNrxteNXmUbhc6aFbRDFHJG0dd3yiwbUbLSkG4nleI
+XBYYegi7Lp+5ETEvZ21+cjmrzHWHaJMzT+JxYJ5VTP39tiIyEcOij3247flsLSo
u3DnNTjje9SUSw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:00:53 2026 by rpki-client